Dashboard / CVE-2024-7259

CVE-2024-7259

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 55/100
Published: 2024-09-26 Modified: 2026-11-06 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools to view Provider passwords in cleartext.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
— — 0 < 4.5.7
— — 0 < 4.5.7
ovirt ovirt-engine < 4.5.7

References & Advisories (5)

https://bugzilla.redhat.com/show_bug.cgi?id=2314229
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

55 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

4.9 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.31%
Raw Score 0.003060
Percentile 23.8%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00306
2026-11-13
0.00306
2026-11-12
0.00306
2026-11-10
0.00306
2026-11-09
0.00306
2026-11-08
0.00306
2026-11-07
0.00306
2026-11-06
0.00306
2026-11-05
0.00261

Intelligence Sources

mitre ref →
nvd ref →

External Links